Offensive Security Engineer
U.S. Bank
Product Lifecycle Manager – Security & Compliance Certifications
Extreme Networks
full-time
Posted on:
Location: California • 🇺🇸 United States
Visit company websiteJob Level
SeniorLead
Tech Stack
CloudPMP
About the role
- Lead and coordinate the full product lifecycle with a strong focus on security and compliance certifications for global markets.
- Drive product certification initiatives from planning through execution for multiple compliance frameworks, including FedRAMP (Moderate and High), GovRAMP, ISMAP (Japan), SOC 2 (Type I & II), ISO 27001, ISO 27017, ISO 42001, Common Criteria, FIPS 140-3, and Germany C5.
- Partner with engineering and security teams to design and implement controls that meet certification requirements.
- Engage with third-party assessment organizations (3PAOs), auditors, and regulatory bodies.
- Coordinate documentation, evidence collection, and audit readiness activities.
- Perform continuous monitoring activities and track certification renewal timelines to ensure continuous compliance.
- Evaluate changes in standards and regulations to assess their impact on product compliance.
- Support go-to-market teams with certification-related customer requests and RFP responses.
Requirements
- Bachelor’s degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience).
- 7+ years of product management or product lifecycle management experience, with at least 5 years focused on security compliance.
- Proven track record managing multiple certifications simultaneously across diverse regulatory frameworks.
- Strong understanding of cloud infrastructure, SaaS architectures, and security best practices.
- Experience working directly with auditors, 3PAOs, and government assessment programs.
- Excellent project management, communication, and stakeholder engagement skills.
- Knowledge of certification frameworks: FedRAMP (Moderate and High); GovRAMP; ISMAP (Japan); SOC 2 (Type I & II); ISO 27001, ISO 27017, ISO 42001; Common Criteria; FIPS 140-3; Germany C5; data networking and wireless fundamentals.
- PMP, CISM, CISSP, or similar certification (preferred).
- Experience with global compliance frameworks beyond those listed (preferred).
- Familiarity with automated compliance and GRC tools (preferred).
- Prior experience in a high-security government or regulated industry environment (preferred).
